Greptile Summary

This PR fixes an incorrect @return docblock on Webhook::verifyHeader(), changing it from @return bool true to @return string 'pass' if valid, otherwise an error message. The actual implementation has always returned strings ('pass', 'No Timestamp available', etc.), and the calling code in constructEvent checks for the string 'pass' — so the old docblock was simply wrong and could mislead developers or static analysis tools.

• The corrected @return string accurately reflects all code paths in verifyHeader.
• No logic, behaviour, or security implications are changed; this is a documentation-only fix.
• The method lacks a native PHP : string return type hint. Adding one would reinforce the corrected docblock at the language level and provide runtime type enforcement.

Confidence Score: 5/5

• This PR is safe to merge — it is a docblock correction with no behavioural changes.
• The change is a one-line docblock correction that accurately reflects the method's actual return type. The method implementation and all callers remain untouched. Only the PHPDoc comment is modified, changing from an incorrect @return bool true to the correct @return string 'pass' if valid, otherwise an error message. No files require special attention.
• No files require special attention

Sequence Diagram

sequenceDiagram
    participant Caller
    participant Webhook
    participant Resource_Webhook as Resource\Webhook

    Caller->>Webhook: constructEvent(sigHeader, payload, secret, tolerance)
    Webhook->>Webhook: verifyHeader(sigHeader, payload, secret, tolerance)
    Note over Webhook: Returns string: 'pass' or error message
    alt result == 'pass'
        Webhook->>Resource_Webhook: constructFromPayload(payload)
        Resource_Webhook-->>Webhook: Resource\Webhook object
        Webhook-->>Caller: Resource\Webhook
    else result is error string
        Webhook-->>Caller: string (error message)
    end

_{Last reviewed commit: 3403dff}